CVE-2024-21381
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A Spoofing vulnerability in Microsoft Azure Active Directory B2C allows an attacker to impersonate the service or users.
Risk Assessment
Spoofing in Azure AD B2C could lead to unauthorized access to user accounts and compromise trust in authentication services.
Recommendation
Apply security updates from Microsoft. Review Azure AD B2C configuration for unusual activity.
Other vulnerabilities in Microsoft Azure Active Directory B2C
See all- CVE-2026-83711Critical
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-33843Critical
Microsoft Azure Active Directory B2C contains an authentication bypass vulnerability using an alternate path or channel, allowing an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Microsoft Azure Active Directory B2C Spoofing Vulnerability